American Bar Association
bd_a594d6029eaa462f · schema v1 · pii pii-v1
Full breach record for American Bar Association →2 incidents on fileThe American Bar Association (ABA) notified the California Attorney General of a data breach where an unauthorized third party gained access to its network starting on or about March 6, 2023. The ABA detected unusual activity on March 17, 2023. The incident involved the acquisition of usernames and salted/hashed passwords for online accounts on the old ABA website (pre-2018) and the ABA Career Center (since 2018). No plain-text passwords were exposed. The ABA activated its incident response plan, retained cybersecurity experts, removed the attacker, and reviewed network security configurations.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 6, 2023
Begins
Mar 17, 2023
Discovered
Apr 20, 2023
Filed
vs. sector median
14 wks faster
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Delaware State AGbd_ebe4be8808814e122023-04-20Candidate
- Washington State AGbd_1919aeff1b67bdfc2023-04-21 · +1dVerified
- Oregon State AGbd_9b4a53df43e28d252023-04-21 · +1dVerified
- South Carolina State AGbd_0e092f7ea0dad5762024-06-10 · +417dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Apr 20 (DE), last Jun 10 (SC) — a 417-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.